This listing of claims will replace all prior versions, and listings, of claims in the application. 



LISTING OF THE CLAIMS: 

1 . (Currently Amended) A tool for maintaining passwords, comprising: 

a password management facility storag e for storing a plurality of current passwords for a 
plurality of respective remote applications, and for each of said applications, (i) a description of 
the application, (ii) a description of the password type for the application, (iii) current and 
previous passwords for the application, (iv) a Uniform Resource Locator for the application, (v) 
executable code and parameters needed to change the password for the application, and (vi) 
readable instructions for changing the password for the application; 

means for displaying a reminder to change one or more of said passwords; and 

a script for simulating keystroke entries to automatically perform a password change in said 
respective applications for said current passwords of said reminder, 

wherein the tool displays a list of the passwords, a description of the computer applications, a 
description of a procedure for changing the password, and a graphical user interface; and 
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a user uses the graphical user interface to invoke at the password management facility, all the 
scripts needed to change all of the plurality of passwords for all of the remote applications via 
the password management facility , and the script tests proposed new passwords to determine if 
said proposed new passwords meet a defined criteria, and the script changes a password only if 
the proposed new password meets the defined criteria; and 

the tool having multiple degrees of security so that different users have different types of access 
to the tool. 

2. (Original) A tool according to Claim 1, wherein the applications are selected from the 
group including workstation applications, legacy host applications, server applications, and 
networked applications. 

3. (Cancelled) 

4. (Original) A tool according to Claim 3, wherein the graphical user interface includes a 
series of activatable display elements, each display element being shown adjacent one of the 
passwords to invoke script for changing said one password. 

5. (Original) A tool according to Claim 1, wherein at least some of the applications include 
a password change form and require a series of actions to get to the password change form, and 
the script includes means to perform said series of actions to get to the password change form. 
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6. (Original) A tool according to Claim 1, wherein the passwords are encrypted in said 
storage. 

7. (Currently Amended) A method for managing passwords to computer applications, 
comprising the steps: 

accumulating a set of passwords in a password management facility, each of said passwords 
being associated with a remote computer application having a password change procedure; 

storing in the password management facility, for each of said applications, (i) a description of the 
application, (ii) a description of the password type for the application, (iii) current and previous 
passwords for the application, (iv) a Uniform Resource Locator for the application (v) executable 
code and parameters needed to change the password for the application, and(vi) readable 
instructions for changing the password for the application; 

providing the password management facility with a set of scripts to operate the password change 
procedures of the associated applications by simulating keystroke entries; and 

a user invoking the password management facility; 

said facility, when invoked, displaying a list of the passwords, a description of the computer 
applications, a description of a procedure for changing the password, and a graphical user 
interface; 
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a user using said graphical user interface to invoke or activate at the password management 
facility, all the scripts needed to change all of the plurality of passwords for all of the remote 
applications via the password management facility , including the steps of the scripts testing 
proposed new passwords to determine if said proposed new passwords meet a defined criteria, 
and the scripts changing a password only if the proposed new password meets the defined 
criteria; and 

the password management facility having multiple degrees of security so that different users 
have different types of access to the facility. 

8. (Cancelled) 

9. (Original) A method according to Claim 7, wherein: 

the displaying step includes the step of displaying a plurality of activatable display elements, 
each of said elements being displayed adjacent one of the passwords on the list; and 

the using step includes the step of activating one of the display elements, said one of the display 
elements being adjacent one of the passwords, to change the password for the application 
associated with said one of the passwords. 

10. (Cancelled). 

5 

I:\IBM\1 1 10\16724VAmend\16724.am5.doc 



11. (Original) A method according to Claim 7, wherein the applications are selected from the 
group including workstation applications, legacy host applications, server applications, and 
networked applications. 

12. (Original) A method according to Claim 7, wherein the step of accumulating the 
passwords includes the step of storing the passwords in an encrypted form in the password 
management facility. 

13. (Currently Amended) A program storage device readable by machine, tangibly 
embodying a program of instructions executable by the machine to perform method steps for 
managing passwords to computer applications, said method steps comprising: 

accumulating a set of passwords in a password management facility, each of said passwords 
being associated with a remote computer application having a password change procedure; 

storing in the password management facility, for each of said applications, (i) a description of the 
application, (ii) a description of the password type for the application, (iii) current and previous 
passwords for the application, (iv) a Uniform Resource Locator for the application, (v) 
executable code and parameters needed to change the password for the application, and (vi) 
readable instructions for changing the password for the application; 

providing the password management facility with a set of scripts to operate the password change 
procedures of the associated applications by simulating keystroke entries; and 
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enabling a user invoking to invoke the password management facility; said facility, when 
invoked, displaying a list of the passwords, a description of the computer applications, a 
description of a procedure for changing the password, and a graphical user interface; and 

using said graphical user interface to invoke or activate at the password management facility, all 
the scripts needed to change all of the plurality of passwords for all of the remote applications 
via the password management facility , including the steps of the scripts testing proposed new 
passwords to determine if said proposed new passwords meet a defined criteria, and the scripts 
changing a password only if the proposed new password meets the defined criteria; and 

the password management facility having multiple degrees of security so that different users 
have different types of access to the facility. 

14. (Cancelled) 

15. (Original) A program storage device according to Claim 13, wherein: 

the displaying step includes the step of displaying a plurality of activatable display elements, 
each of said elements being displayed adjacent one of the passwords on the list; and 

the using step includes the step of activating one of the display elements, said one of the display 
elements being adjacent one of the passwords, to change the password for the application 
associated with said one of the passwords. 
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16. (Cancelled). 

17. (Original) A program storage device according to Claim 13, wherein the applications are 
selected from the group including workstation applications, legacy host applications, server 
applications, and networked applications. 

18. (Original) A program storage device according to Claim 13, wherein the step of 
accumulating the passwords includes the step of storing the passwords in an encrypted form in 
the password management facility. 

19. (Previously Presented) A tool according to Claim 1, wherein the defined criteria is based 
on data from a user table. 

20. (Previously Presented) A method according to Claim 7, comprising the further steps of: 

displaying user prompts to obtain information from the user when a script or code is invoked to 
change one of the passwords; 

encrypting all of the data stored in said facility; 
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the script, based on a user identification, queries an employee table to determine an employee 
class associated with the user identification; and 

said criteria include 

i) a proposed new password differs from a current password by a given number of 
characters, 

ii) criteria based on data from user tables, user profile tables, and user history tables, 

iii) the user belongs to a certain class of employees, and 

(iv) the proposed password must contain a number of alphabet characters, a number of numeric 
characters and a number of punctuation characters. 
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